CVE-2004-1000

lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2004-01-10

Last modified

2024-08-08

Affected products

• Lintian (Debian)

References

• http://secunia.com/advisories/13771
• http://www.debian.org/security/2004/dsa-630
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18808